Changeset 6777

Timestamp:

02/08/2013 07:45:50 AM (12 years ago)

Author:

djpaul

Message:

Update group admin logic to not allow moderators to save group settings via POST. Fixes #4737, props mercime

Location:

trunk/bp-groups

Files:

• bp-groups-screens.php (modified) (1 diff)
• bp-groups-template.php (modified) (1 diff)

trunk/bp-groups/bp-groups-screens.php

@@ -514 +514 @@
         return false;
 
-    if ( bp_is_item_admin() || bp_is_item_mod() ) {
+    if ( bp_is_item_admin() ) {
 
         $bp = buddypress();

trunk/bp-groups/bp-groups-template.php

@@ -1435 +1435 @@
     $current_tab = bp_get_group_current_admin_tab();
 
-    if ( bp_is_item_admin() || bp_is_item_mod() ) : ?>
+    if ( bp_is_item_admin() ) : ?>
 
         <li<?php if ( 'edit-details' == $current_tab || empty( $current_tab ) ) : ?> class="current"<?php endif; ?>><a href="<?php echo trailingslashit( bp_get_group_permalink( $group ) . 'admin/edit-details' ) ?>"><?php _e( 'Details', 'buddypress' ); ?></a></li>